Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
File: D0OG59TvxHLBH-nP7z0zCXSzP2E.mft (raw, json)
Hash identifier: +Kn1qEynRTd4Glt9+oUIek8yW7ZvENX+5SeQqWi9Od0=
Subject key identifier: 98:B3:20:85:63:7B:70:CA:F7:9B:0E:F3:11:DB:07:E9:38:80:2F:D6
Authority key identifier: 0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
Certificate issuer: /CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
Certificate serial: 019A71B948897585C3C4053D02F79F3EDC1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
Manifest number: 09C0
Signing time: Tue 11 Nov 2025 07:02:39 +0000
Manifest this update: Tue 11 Nov 2025 07:02:39 +0000
Manifest next update: Wed 12 Nov 2025 07:02:39 +0000
Files and hashes: 1: D0OG59TvxHLBH-nP7z0zCXSzP2E.crl (hash: Q+Pd8LyLPUqUCHNBDz1gwCEZwL/T5Fmab1ckoGczULE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:48:89:75:85:c3:c4:05:3d:02:f7:9f:3e:dc:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
Validity
Not Before: Nov 11 07:02:39 2025 GMT
Not After : Nov 12 07:02:39 2025 GMT
Subject: CN=98b32085637b70caf79b0ef311db07e938802fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:93:5d:ed:a8:74:40:4d:18:71:ca:f0:68:ed:
74:02:55:15:44:e4:11:03:08:6c:bc:f7:c0:ea:aa:
25:4d:2a:a9:dc:64:90:1b:9a:f7:11:91:11:e3:06:
d2:15:62:07:a8:8d:20:a8:08:3a:64:fd:d4:00:88:
3f:84:fe:2f:9c:26:ac:fb:22:c1:09:6b:65:c2:8c:
f2:04:c6:87:a8:36:d2:b5:50:67:f8:dc:b1:16:75:
69:81:0f:1f:86:19:f2:b8:3a:d2:68:98:f7:be:98:
af:af:0e:50:fa:78:3e:72:7c:d7:8f:e0:c1:37:0e:
de:d7:72:23:df:7c:11:b1:60:42:41:bf:05:38:4e:
c9:ae:91:c6:4e:5f:97:43:cd:29:09:d1:27:d0:7a:
c2:d8:82:1e:86:32:94:9c:9a:9d:da:1e:27:28:0c:
35:59:13:c6:27:4a:3e:11:f2:5d:7d:f3:7c:ae:a9:
6d:f6:af:ea:69:c5:1e:99:e8:95:3c:18:86:be:22:
8a:69:b5:50:77:7f:0a:88:cb:48:4c:15:95:5d:ad:
c8:93:a9:5e:40:ee:f6:6e:23:43:6b:d4:b5:64:f5:
ab:4a:64:9a:2c:52:5b:8f:93:05:1b:8e:e2:3c:e2:
08:2e:11:f5:17:34:46:10:a9:4b:fa:34:30:6d:c6:
5b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B3:20:85:63:7B:70:CA:F7:9B:0E:F3:11:DB:07:E9:38:80:2F:D6
X509v3 Authority Key Identifier:
keyid:0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:9f:2f:8a:1e:03:94:3d:4f:53:a9:6f:ca:48:2e:5d:95:7c:
99:d4:41:71:e5:b8:05:f2:91:ed:bb:e1:c3:06:88:08:45:b6:
1b:55:a2:02:09:95:19:12:3d:d6:88:53:a2:8b:68:72:18:13:
3b:d4:f9:9c:8f:39:ba:63:9e:8c:b0:68:ab:65:9d:1a:3e:bc:
26:49:47:91:45:40:c8:01:7a:6f:0f:a8:ae:11:55:3b:6b:e1:
7d:65:65:7c:ea:a5:84:53:b1:7b:51:00:2b:e1:67:8f:ff:0d:
4a:bd:b3:ec:bd:09:fe:db:e2:82:80:1f:8c:10:33:fb:15:e3:
ff:2e:b5:67:23:89:e9:57:25:9b:9a:20:31:59:16:13:95:bf:
01:ae:a1:a8:5a:2f:f3:7d:e0:db:7a:f4:c3:d9:5d:9f:af:af:
1b:14:88:c1:74:fb:85:57:f3:66:7a:3a:4b:b7:86:ce:1d:03:
9e:a5:50:bb:67:77:78:03:ee:07:b3:65:2b:26:72:6c:96:91:
d1:71:d0:2d:86:93:38:f5:91:e7:b8:b2:8c:6d:f1:d6:50:bd:
89:e1:89:c7:e4:0c:8f:17:0c:e6:7d:af:c3:0a:51:7d:3d:f8:
f1:22:92:03:b5:0e:2c:1c:b5:35:4a:6e:62:06:fb:c5:c7:34:
da:90:cf:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:20 2025 by rpki-client